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Abstract 

This  paper  describes  the  architecture  and  re¬ 
quirements  of  an  integrated  system  that  is  needed 
to  support  the  command-and-control  requirements 
of  the  Department  of  Homeland  Security  during 
crisis  prevention,  disaster  relief  and  other  critical 
operations.  The  architecture  is  based  on  emerging 
science  and  technology  that  has  been  under  devel¬ 
opment  in  information  management.  Lessons 
learned  in  the  implementation  of  decision-support 
systems  for  Chemical,  Biological,  Radiological  and 
Nuclear  defense,  standards,  spiral-systems  integra¬ 
tion  and  implementation,  and  web-service-centric 
computing,  contribute  to  the  architecture’s  design. 
The  theoretical  underpinnings  of  such  a  system  are 
represented  using  a  formalistic  approach  called 
“paradigm  reuse.  ” 

Keywords:  Command  &  Control  (C2);  Decisions; 
Web  Services;  Paradigm  Reuse;  Integration 

1.  Introduction 

This  paper  describes  support  for  the  Department 
of  Homeland  Security  (DHS)  through  three  inte¬ 
gration-oriented  imperatives  of  a  functionally  inte¬ 
grated,  service-centric  [7]  system  to  improve  inter¬ 
operability,  reduce  cost,  and  provide  additional 
capability  to  diverse  user  communities. 

1)  National  standards  related  to  National  Inci¬ 
dent  Management  System  (NIMS)  and  Na¬ 
tional  Response  Framework  (NRF): 

a.  First  responders 

b.  Local  governments  and  agencies 

c.  Regional  and  federal  agencies 

2)  Outreach  centers  for  technology  transfer: 

a.  Geospatial  systems  and  C2 

b.  Chemical,  Biological.  Radiological  and 

Nuclear  (CBRN)  defense  and  explosives 

c.  Human  factors  and  maritime  domain 

3)  Technology  assistance  for: 


a.  Architecture  and  data  management 

b.  Testing  and  accreditation 

c.  Information  assurance 

d.  Acquisition,  sustainment,  and  training 

2.  Background 

This  paper  responds  to  the  imperatives  but  also  is 
related  to  several  other  needs  for  pilot  programs  at 
the  city,  state,  and  regional  level.  The  individual 
states  and  representative  agencies  will  respond 
with  policies  regarding  their  emergency  manage¬ 
ment  responsibilities.  However,  the  DHS  Science 
and  Technology  (S&T)  directorates  must  ensure 
that  capabilities  contain  the  content-relevant  objec¬ 
tives  described  in  [4].  These  capabilities  also  must 
contribute  to  the  overarching  goal  of  realizing  a 
national  integrated  mission  space  for  the  seamless 
sharing  of  secure  and  public  data  among  users, 
applications,  and  platforms. 

The  goal  of  becoming  platform  or  system  agnos¬ 
tic  for  seamless  interoperability  through  data  shar¬ 
ing  is  the  ultimate  driver.  However,  full  implemen¬ 
tation  requires  necessary  standards  and  governance 
development.  (See,  for  example,  [6]).  This  is  the 
appropriate  level  of  coordination  for  situational 
awareness,  but  capabilities  to  address  decision  sup¬ 
port  require  certain  models  that  could  be  extended 
to  the  user  for  enhancing  coordination  efforts 
across  agencies  and  jurisdictions.  The  system- 
agnostic  approach  and  the  layering  are  necessary  to 
provide  cost-effective  measures  to  align  and  inte¬ 
grate  the  information-systems  and  services  of  dis¬ 
parate  agencies  and  communities. 

The  first  imperative  addresses  an  integrated- 
resource  repository  implementation  and  sustain¬ 
ment  plan  for  supporting  web  services  and  compo¬ 
nents.  Without  effective  coordination  across  the 
DHS  community  for  supporting  net-centric  com¬ 
mon  services  and  components,  each  city,  state,  and 
region  will  duplicate  efforts  in  building  and  main¬ 
taining  common  web-service  hardware  and  soft¬ 
ware  solutions.  Duplication  of  effort  will  incur 
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unnecessary  costs  across  the  DHS  community  as 
well  as  result  in  development  of  non-interoperable, 
proprietary,  and  “stove-piped”  web  services  and 
components.  Integrated  approaches  to  C2  that  avoid 
duplication  of  effort  are  described  in  [6], 

The  second  and  third  imperative  would  be  to  de¬ 
fine  a  mechanism  to  sustain  the  web  services  and 
components  that  will  result  from  the  successful 
implementation  of  [1]  and  [6],  Support  through 
comnrand-and-control  technology  transfer  and  re¬ 
use  must  upgrade  continually  the  capability  to 
manage  emergencies  and  provide  interoperability 
at  low  cost  across  multiple  agencies.  This  also  ex¬ 
tends  to  ensuring  interoperability  between  civilian 
and  federal  command-and-control  efforts. 

The  Disaster-Management  eGov  initiative  (DM) 
[3],  improves  access  to  disaster-assistance  informa¬ 
tion,  simplifies  applying  for  disaster  assistance,  and 
eliminates  redundant  agency  processes.  The  DM- 
initiative  elements  improve  information  sharing, 
reuse,  and  enhanced  services  for  citizens  and  the 
emergency-management  community,  including 
first  responders  at  the  local,  tribal,  state,  and  fed¬ 
eral  levels.  DM  aims  to  meet  the  nation’s  need  for 
a  unified  and  integrated  point  of  access  to  disaster 
preparedness,  mitigation,  response,  and  recovery 
information.  DM  includes  Disaster  Management 
Interoperability  Services  (DMIS)  and  Open  Plat¬ 
form  for  Emergency  Networks  (OPEN). 

Through  the  DisasterHelp.gov  portal,  DM  pro¬ 
vides  a  unified  point  of  access  to  disaster-related 
information  and  services  for  citizens  and  emer¬ 
gency  organizations.  The  portal  is  a  centralized 
location  for  the  public  and  for  first  responders  to 
access  disaster  information  and  services  provided 
by  government  agencies  and  non-governmental 
organizations,  thereby  reducing  the  performance 
gap  for  a  single  federal  disaster-management  site. 
DMIS  provides  government  and  non-governmental 
organizations  secure  disaster-information  ex¬ 
change.  The  DM  Standards  Initiative  [4]  facilitates 
the  development  of  emergency  data-exchange  lan¬ 
guage  standards  for  incident  management  enabling 
the  emergency  response  community  to  share  data 
seamlessly  and  securely  across  disparate  informa¬ 
tion  systems.  (See,  for  example  [1]  and  [6].) 

3.  Requirements 

DHS  and  Department  of  Defense  (DoD)  web 
services  and  net-centric  implementation  require¬ 
ments  include  the  following. 

•  Service-Oriented  Architecture  (SOA)  open  archi¬ 
tecture-compliant  C2  system  interfaces  [7]. 

•  Migration  to  a  web-services  environment  to  inte¬ 
grate  common  services  and  components  for  dis¬ 
parate  users  at  various  echelons  and  agencies. 


•  Promotion  of  information-technology  system 
interoperability  with  multiple  agencies  of  differ¬ 
ing  size  and  complexities  [  1 J.  [6]. 

•  Implementation  of  DHS  and  DoD  net-centric 
web-services  vision  by  reviewing  prevalent  gov¬ 
ernment-agency  architectures,  capability  needs, 
and  mandated  standards  to  identify  commonal¬ 
ities,  synergies,  conflicts,  gaps,  and  potential  im¬ 
provements  [6],  [7], 

•  Examination  of  net-centric  standards,  guidance, 
and  implementation  documents  developed  across 
the  DoD  and  their  condensation  into  a  clear  and 
concise  form  that  users  and  developers  would 
find  useful  in  developing  common  services  for  a 
web-services  environment  [6],  [7], 

An  interfacing  model  needs  to  be  adopted  to 
meet  requirements  in  data  management  L 1  J.  com¬ 
mon-component  software  and  hardware  interfaces, 
and  the  sustainment  of  a  command-and-control 
components  repository  with  linkages  to  existing 
user-specific  repositories  and  artifacts. 

The  main  requirements  are  to  coordinate  imple¬ 
mentation  of  web-service  policy  across  the  greater 
DHS  domain,  capture  assistance  requests  from 
users,  and  establish  a  support  and  sustainment  ca¬ 
pability  for  the  emergency  management. 

DHS  S&T  has  established  activities  that  could  be 
leveraged  to  meet  interoperability  standards  re¬ 
quirements,  including  the  Integrated  CBRN 
(ICBRNE)  testbed.  Homeland  Security  S&T  test¬ 
bed  (HSSTT).  ICBRNE  is  focused  on  data  models, 
data  integration,  data  interoperability  and  sensor 
standards.  (See,  for  example  [2]  and  [6].)  HSSTT  is 
focused  on  interoperability  testing.  Extensions  to 
various  agencies  through  the  SSC  Pacific  End-to- 
End  C2  test  bed  leverage  connections  across  multi¬ 
ple  domains  and  agencies. 

The  DHS  S&T  is  chartering  a  Technology  Assis¬ 
tance  Center  (TAC)  that  would  provide  a  cost- 
effective  single  point  of  contact  for  users  (custom¬ 
ers,  developers,  and  emergency  managers)  to  re¬ 
ceive  professional  and  timely  assistance  with  In¬ 
formation  Technology  (IT)  and  net-centric  compo¬ 
nent  standards,  interoperability,  and  supportability 
needs.  The  TAC’s  ultimate  goal  is  to  facilitate  the 
creation  of  more  efficient,  common,  and  consis¬ 
tently  superior  interoperable  and  integrated  IT  sys¬ 
tems  across  the  DHS  S&T  community. 

Lessons  learned  in  interoperability  and  integra¬ 
tion  provide  that,  as  well  as  C2  technology  devel¬ 
opment  to  provide  decision-support  upgrades  to 
support  the  C2  domain’s  transition  to  web  Services. 
(See,  for  example  [1],  [2],  [6],  and  [7].)  Lessons 
learned  also  will  be  used  in  a  technology-assistance 
center  that  supports  technology  transition,  architec¬ 
ture  development,  data  fusion  and  correlation, 
training,  requirements  generation,  testing,  and 
standards  development  for  the  CBRN  community. 
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The  TAC  executes  Fiscal-Year  (FY)  responsi¬ 
bilities  based  on  directives  from  the  DHS  S&T 
stakeholders.  This  direction  is  aligned  to  current 
FY  requirements  in  the  implementation  of  DF1S 
policy  as  promulgated  by  each  of  the  Directorates. 
The  DHS  S&T  TAC  operating  in  a  continuous 
support  capability  could  provide  the  necessary 
guidance  to  the  DHS  users  for  the  transition  of  IT 
systems  to  disparate  environments  24  hours  a  day, 
seven  days  a  week.  The  TAC  focuses  on  the  coor¬ 
dination  and  education  of  the  community  regarding 
the  proper  direction  and  the  support  in  meeting 
DHS  S&T  IT  net-centric  policy  and  standards. 

The  TAC  cannot  sustain  the  component  net- 
centric  services  components  required  to  match  the 
various  SOA  strategies  set  forth  by  each  user  eche¬ 
lon.  However,  it  could  enable  consistent  implemen¬ 
tation  for  data  fusion  and  correlation  for  national 
emergencies  and  events.  A  formalistic  approach  is 
needed  to  generalize  information  sharing  and  reuse, 
and  to  promote  paradigm  consistency  and  reliabil¬ 
ity  among  diverse  first  responders. 

4.  Paradigm  Reuse 

A  formalistic,  efficiently  extensible  approach  for 
sharing  and  reusing  knowledge  is  needed  across  the 
C2  enterprise  domain.  This  requirement  rules  out 
traditional  expert  systems.  Moreover,  the  integrated 
system  needs  to  have  the  capability  to  fuse  dispa¬ 
rate  domains  for  true  knowledge  sharing.  Because 
knowledge  is  inherently  incomplete,  users  will 
want  a  creative  paradigm  that  can  induce  some 
degree  of  knowledge.  Whereas  this  does  not  repre¬ 
sent  a  radical  departure,  at  least  it  can  extend  the 
saved  knowledge  using  common-sense  reasoning. 

The  first  task  in  developing  any  formal  system 
for  the  capture  and  reuse  of  knowledge  is  to  solve 
the  problem  of  how  to  represent  that  knowledge. 
Hofstadter  has  written,  “Proximity  to  a  concept  and 
a  gentle  shove  are  often  all  that  is  needed  for  a  ma¬ 
jor  discovery  and  that  is  the  reason  for  the  drive 
towards  languages  of  ever-higher  levels”  [5].  Our 
formalism  must: 

•  Be  close  to  natural  language  or  readily  translated 
into  it; 

•  Support  generalization  and  abstraction; 

•  Support  sequential  and  parallel  operations; 

•  Enable  the  formation  of  reusable  and  extensible 
schemata; 

•  Underpin  a  case -based  reasoning  system  (CBR). 
One  existing  formalism  that  comes  closest  to  sat¬ 
isfying  these  constraints  is  predicate  calculus. 
However,  experience  has  shown  that  predicate  cal¬ 
culus  is  difficult  to  put  in  bijective  correspondence 
with  natural  languages.  Predicate  calculus  has  a 
superfluous  mechanics  for  reasoning.  However,  the 
CBR  system  also  will  cover  that  aspect. 


The  following  formalism  draws  from  CBR  to  de¬ 
fine  the  knowledge  base,  and  typogenetics  to  ab¬ 
breviate  the  cases.  Thus,  the  paradigm-reuse  for¬ 
malism  is  developed  below  using  an  example. 

1 .  The  system  shell  consists  of  a  case-based  rea- 
soner  defined  as  akj,  for  i,k  =  1,  ...,  m;  j,l  = 
1,  ....  n.  This  defines  the  knowledge  base,  where 
the  inference  engine  assigns  the  a  metric.  The 
inference  engine  then  selects  the  a^i  based  on  the 
metric’s  ranking.  Ties  are  broken  in  favor  of  the 
most  recently  acquired  or  fired  case,  which  is 
similar  in  procedure  to  hill-climbing  algorithms. 
The  metric  needs  to  exceed  some  defined  thresh¬ 
old,  8 ,  or  no  match  is  said  to  exist. 

2.  For  example,  consider  the  screening  of  airport 
passengers.  The  first  task  is  to  abstract  this  natu¬ 
ral-language  description  into  general  predicates. 
Thus,  if  (screen  (passengers))  then  proceed  (gate) 
else  proceed  (detention).  This  creates  three  maps 
and  one  situation-action  rule  that  are  saved  in  the 
same  case  base  as  follows.  Grammatical  changes 
are  realized  by  code  to  generalize  applicability. 

a.  screen  airport  passengers  (screen  (pas¬ 
sengers)) 

b.  proceed  to  gate  ->  proceed  (gate) 

c.  proceed  to  detention  ->  proceed  (detention) 

d.  The  three-step  sequence  of  events  can  be 
summarized  as  “iatbec,”  which  is  an  abbre¬ 
viation  of  the  rule,  “If  (a)  then  (b)  else  (c).” 

e.  In  keeping  with  JAVA  programmer’s  nota¬ 
tion,  “or”  is  written  as  “II”  e.g.  “AIIB.” 
Permit  parallel  processing  where  pertinent, 
available  and  included. 

f.  Similarly,  “and”  is  written  as  “&&”  e.g. 
“A&&B.”  “A  and  B”  data  aggregation, 
integration  or  fusion 

3.  Next,  generalize  the  results  of  the  previous  step. 
This  schema  must  be  randomized  to  maximize 
its  reusability.  Generalization  takes  the  form  of 
knowledge  fusion. 

4.  Suppose  that  the  knowledge  base  also  contained 

the  knowledge,  “If  (identity  =  (pilot  in  com¬ 
mand))  then  proceed  (gate)  else  (screen  (passen¬ 
gers)),”  as  a  distinct  case,  abbreviated  as  “ipt- 
bea.”  Here  “bea”  “means  (b)  else  (a)”  like  in 
paragraph  2d.  Here,  “p”  designates  pilot  in  com¬ 
mand  and  the  other  letters,  “i _ tbea”  are  the  de¬ 

fined  in  paragraph  2.  The  fusion  of  iatbec  with 
iptbea  is  a  typical  typogenetic  problem  and 
yields,  iallptbea.  The  fused  rule  indicates  that  the 
would-be  pilot  would  be  screened  as  a  passenger 
and  would  not  be  detained  (rule  c),  which  would 
be  the  case  if  the  fused  rule  were,  iallptbec.  In  ei¬ 
ther  case,  the  fused  rule  allows  the  pilot  and  a 
passenger  to  be  screened  in  parallel,  which  is 
why  the  “II”  sign  appears  in  these  rules  above.  As 
in  the  case  of  iatbec,  this  map  is  saved  in  the  case 
base  and  is  itself  subject  to  further  generalization 
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with  other  cases,  where  appropriate.  For  exam¬ 
ple,  f  expresses  the  fusion  of  the  2  cases  de¬ 
scribed  above: 

f.  iatbec  &&  iptbea  A  iallptbeclla 

5.  Cases  described  above  automate  the  difficult 
process  of  iterative  generalization  for  knowledge 
fusion.  They  are  traceable  and  the  trained  user 
can  delete  or  update  them  as  necessary. 

6.  Next,  the  fusion  of  knowledge  may  have  pro¬ 
duced  incorrect  rules,  depending  on  the  imple¬ 
mentation  domain.  If  imperfection  is  allowed, 
the  system  can  do  far  more,  albeit  at  the  risk  of 
error.  For  example,  suppose  that  the  plane’s  first 
officer  or  co-pilot  (o)  approaches  the  gate.  Also, 
suppose  that  the  system  does  not  have  an  over¬ 
riding  explicit  case  or  case  generalization  to 
cover  this  situation.  The  system  would  note  that, 
and  reason  out  the  following  suggestion  by  way 
of  abstraction.  Abstractions  are  saved  in  the  form 
of  sets  in  the  same  way  that  declarations  are 
saved  in  a  programming  language.  Abstractions 
are  saved  separately  from  cases  but  they  are  ca¬ 
pable  of  evolutionary  modification  just  the  same. 
Rule  (g)  tells  the  reasoner  to  treat  a  first  officer 
as  it  would  a  pilot  in  command  by  placing  them 
in  the  same  set  for  business  rules  and  reasoning, 
g-  {o,  p} 

By  substitution  from  (g),  we  obtain  the  generali¬ 
zation,  iallptbeclla  A  iallotbeclla,  which  suggests 
that  identified  first  officers  may  proceed  to  the 
gate,  or  otherwise  be  detained  or  screened  as  a 
passenger.  TSA  officials  would  disagree  with 
this  result,  in  which  case  the  set  in  (g)  would  be 
broken,  or  the  rule  in  (f)  would  be  expunged,  de¬ 
pending  on  the  nature  of  the  user’s  disagreement. 
Such  disagreements  and  resulting  deletions  may 
occur  at  any  time.  Given  that  this  is  the  case,  the 
correct  knowledge  must  be  captured  by  a  case,  as 
expressed  in  (h). 
h.  iallptbeclla  A  iallotbeclla 
Incorrect  and  unattractive  cases  will  fall  into  dis¬ 
use  because  all  cases  and  sets  are  maintained  by 
expunging  the  least-frequently  used  member 
whenever  space  becomes  at  a  premium  (or  even 
when  it  is  not,  depending  on  the  circumstances). 
In  some  systems,  instead  of  expunging,  such 
members  are  written  to  an  optical  jukebox  or  its 
equivalent.  Cases  deemed  to  be  correct  and  logi¬ 
cal,  as  determined  by  their  frequent  usage,  are 
moved  to  the  head  of  their  respective  list. 

7.  Cases  are  ranked  by  using  a  simple  predicate 
matching  and  counting  scheme.  All  predicates 
are  given  the  same  uniform  weighting. 

8.  Higher-order  transformation  rules  should  not  be 
incorporated  as  the  possibility  of  correct  action 
drops  off  rapidly,  for  most  domains,  with  succes¬ 
sive  levels  of  generalization.  Such  rules  map  the 
mapping  rules  and  will  not  be  discussed  further. 


Indeed,  for  random  domains  that  lack  any  mean¬ 
ingful  content,  even  one  level  of  mapping  rules, 
as  presented  above,  will  not  work  efficiently. 
However,  the  material  in  this  section  is  predi¬ 
cated  on  the  low  likelihood  of  observing  such  a 
domain,  and  an  information  source  to  be  ex¬ 
ploited  is  thus  identified. 

The  presented  model  for  paradigm  reuse  will  be 
modified  through  implementation.  No  single  model 
is  perfect  for  all  applications.  Rather,  the  common¬ 
ality  of  knowledge  and  its  representations  remain 
to  be  exploited  more  fully.  This  formalism  is  par¬ 
ticularly  applicable  to  DHS  problems  because: 

•  It  reuses  knowledge  from  multiple  sources  across 
domains  to  solve  problems  in  a  given  domain. 

•  It  is  a  machine-learning  paradigm  that  acquires 
generalized  knowledge  across  domains. 

•  First  responders  can  train  and  query  the  system 
using  structured  English,  and  they  can  train  the 
system  rapidly. 

•  The  resulting  C2  system  essentially  supports 
DHS  operations  through  knowledge  fusion. 

•  Over  time,  for  a  relatively  fixed  domain,  the  er¬ 
ror  rate  converges  towards  zero. 
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